W2 Fraud: Common Schemes, Penalties, and How to Report It

---

Table of Contents#

1. What Exactly Is W2 Fraud?
2. Most Common W2 Fraud Schemes
3. Legal Penalties for W2 Fraud
4. Signs You Are a W2 Fraud Victim
5. Step-by-Step Guide to Reporting W2 Fraud
6. Proactive Tips to Prevent W2 Fraud
7. Final Takeaways
8. References

---

What Exactly Is W2 Fraud?#

W2 fraud refers to any intentional falsification, theft, or misuse of official W2 forms to gain unfair financial benefit, evade taxes, or steal identities. Accidental errors (such as a typo in an employee’s name or wage amount) do not qualify as fraud, and can be corrected by filing a W-2c amended form with the IRS.

Perpetrators of W2 fraud may include:

• Third-party identity thieves and scammers
• Employers seeking to avoid payroll tax obligations
• Individual filers attempting to claim fraudulent tax refunds or underreport income
• Malicious insiders with access to company payroll data

---

Most Common W2 Fraud Schemes#

W2 fraud takes many forms, but these are the most prevalent schemes reported to the IRS annually:

1. W2 Phishing Scams#

The most widespread W2 fraud scheme, phishing attacks involve scammers pretending to be company executives, HR staff, or government officials to trick employees or payroll teams into sharing full W2 datasets. For example, a scammer may send an email to a small business HR manager pretending to be the CEO, requesting a full list of employee W2s for a "confidential compensation review." Stolen W2 data is then sold on the dark web or used to file fraudulent tax returns in victims’ names.

2. Employer Falsified W2 Schemes#

Some employers intentionally falsify W2 data to reduce their tax burden:

• Underreporting employee wages to avoid paying full payroll taxes (Social Security, Medicare, and unemployment taxes)
• Overreporting wage expenses to lower the company’s taxable business income
• Creating "ghost employee" W2s for non-existent staff to claim fraudulent business deductions and tax refunds

3. Self-Filed Fake W2 Fraud#

Individual filers may create falsified W2 forms to:

• Inflate reported tax withholdings to claim larger tax refunds than they are owed
• Underreport annual income to reduce their total tax liability

4. Data Breach W2 Theft#

Hackers frequently target small business payroll systems and third-party payroll providers to steal bulk W2 records. Payroll data breaches have hit their highest level in five years, with a 41% increase in incidents affecting employee records. The 2023 MOVEit file-transfer vulnerability, for example, exposed payroll and HR data across dozens of organizations worldwide.

---

Legal Penalties for W2 Fraud#

W2 fraud is a federal offense, and penalties vary based on the perpetrator and scale of the crime:

Penalties for Third-Party Scammers and Identity Thieves#

• Up to 15 years in federal prison per count of identity theft, plus up to 2 years mandatory sentence for aggravated identity theft
• Fines of up to $250,000 per offense
• Court-ordered restitution to cover all financial losses for victims
• Additional penalties for related crimes (such as money laundering) can extend prison sentences to 20 years or more

Penalties for Employers Who Commit W2 Fraud#

• Civil penalties of $680 per intentionally falsified W2, with no maximum cap for large-scale fraud (as of 2026, per IRC §6721)
• Full repayment of all unpaid payroll taxes plus 100% of the owed amount as a penalty, plus interest
• Criminal charges for tax evasion carry up to 5 years in federal prison and fines of up to $500,000 for corporations

Penalties for Individuals Who File Fake W2s#

• Civil penalty of 20% of underpaid tax for non-intentional falsification, or 75% of the owed amount for proven fraud
• Criminal charges carry up to 3 years in federal prison and fines of up to $100,000
• Requirement to repay all fraudulent refunds plus interest, and permanent placement on an IRS high-risk filer list for 3+ years

---

Signs You Are a W2 Fraud Victim#

Watch for these red flags that indicate your W2 data has been compromised:

1. Your tax return is rejected by the IRS because a return has already been filed under your SSN
2. You receive an IRS notice stating you owe tax on income from an employer you never worked for
3. You receive a W2 form from a company you have no association with
4. You get unexpected notices from creditors or debt collectors for accounts you never opened
5. Your employer notifies you of a payroll data breach that exposed W2 records

---

Step-by-Step Guide to Reporting W2 Fraud#

If you suspect you are a victim of W2 fraud, take these actions immediately to minimize damage:

1. Contact the IRS right away: Call the IRS Identity Protection Hotline at 1-800-908-4490, and file Form 14039 (Identity Theft Affidavit) to flag your SSN for fraudulent activity. You may also request an Identity Protection PIN (IP PIN) to prevent future fake returns from being filed in your name.
2. Alert your employer/payroll provider: If the fraud stems from a company data breach, notify your HR team immediately so they can alert other affected employees and secure their systems.
3. File a report with the FTC: Submit a full report at IdentityTheft.gov to get a personalized recovery plan.
4. Secure your credit: Place a free 1-year fraud alert on your credit reports with Equifax, Experian, and TransUnion, or request a permanent credit freeze to block new accounts from being opened in your name.
5. Report phishing incidents: If the fraud came from a phishing email, forward the message to the IRS at [email protected] and file a report with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov.
6. File a local police report: Submit a report with your local law enforcement agency if you have evidence of financial loss or identity theft.

---

Proactive Tips to Prevent W2 Fraud#

For Individual Employees#

1. Never share your W2, SSN, or payroll login details via email, text, or unencrypted messaging unless you have verified the recipient's identity via phone call first.
2. Enable two-factor authentication on all payroll and tax filing accounts.
3. File your tax return as early as possible each year to beat scammers to filing a fake return in your name.
4. Check your free credit report quarterly for suspicious account activity.
5. Sign up for an IRS Identity Protection PIN (IP PIN) at irs.gov to prevent anyone else from filing a tax return using your SSN.

For Employers#

1. Train HR and payroll staff on W2 phishing red flags, and require multi-factor verification (e.g. a phone call confirmation) for any requests for bulk W2 data.
2. Store all W2 records in encrypted, password-protected systems, and limit access to only authorized staff.
3. Send W2s to employees via secure, password-protected portals instead of unencrypted email or standard mail when possible.
4. Notify all employees within 72 hours of a confirmed payroll data breach that exposes W2 records.

---

Final Takeaways#

W2 fraud is a high-impact crime that can take years to fully resolve for victims, but early detection and proactive protection can drastically reduce your risk. By familiarizing yourself with common schemes, monitoring for red flags, and acting fast if you suspect fraud, you can protect your identity and finances during tax season and beyond.

---

References#

1. Internal Revenue Service. (2026). Form W-2/SSN Data Theft: Information for Businesses and Payroll Service Providers. Retrieved from https://www.irs.gov/newsroom/form-w-2-ssn-data-theft-information-for-businesses-and-payroll-service-providers
2. Federal Trade Commission. (2024). What To Know About Tax Identity Theft. Retrieved from https://consumer.ftc.gov/articles/what-know-about-tax-identity-theft
3. U.S. Department of Justice. Criminal Tax Case Procedures — Justice Manual. Retrieved from https://www.justice.gov/jm/jm-6-4000-criminal-tax-case-procedures
4. Cybersecurity and Infrastructure Security Agency. (2021). Preparing for Tax Season. Retrieved from https://www.cisa.gov/news-events/news/preparing-tax-season